AI / OpenClaw Interview Questions
How does OpenClaw's per-agent tool policy limit the blast radius of a compromised agent?
Because each agent under a multi-agent configuration only has the specific tools declared in its own policy, a compromise of one agent doesn't automatically grant access to every capability across the whole deployment.
- An agent with CRM tools enabled has no path to server-script execution if that capability was never granted to it in the first place
- This containment happens at the configuration level, before any request even reaches the Tool Layer
- It doesn't eliminate risk entirely, a compromised agent can still misuse whatever it was legitimately granted, but it caps the worst-case scope
This is the practical value of least-privilege design in an agentic system: it doesn't stop every possible bad outcome, but it keeps a single mistake or compromise from escalating into full system-wide access.
What happens to an agent's reach if a tool was never granted to it?
Does per-agent tool policy eliminate all risk from a compromised agent?
More Related questions...
